Hacktoberfest 2026: những issue maintainer đã đánh dấu cho tháng Mười, đang mở và phù hợp người mới. Xem issue Hacktoberfest

Manager brief taken by a reading helper that fakes the team's work

Đang mở
  • Có gì không ổn?
#1,568 0 bình luận 0 reaction 0 người được giao Xem trên GitHub

Maintainer thường phản hồi trong vòng 1 ngày

Chưa có ai nhận issue này.

Đánh giá

Độ khó
4/5
Thời gian dự kiến
3-5 ngày
Mức phù hợp với người mới
66/100
Loại issue
Lỗi
Độ rõ ràng
Đặc tả rõ ràng
Mức độ hoạt động
Sôi nổi
Công nghệ
go
Lĩnh vực
cli, devtools

Hướng nghiên cứu

Start by reproducing the scenario from the issue using dev build 837b2b0, then inspect internal/session/readhandoff.go:150-160 and 300-321. Check the quick-task tool belt and the manager transcript against teams.json and team Traffic. Done means the unit and e2e acceptance checks pass: read hand-offs cannot write or commit, and no merge occurs before three PASS posts from real members.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Mô tả

area:session bug sev:critical

Seen on: dev 837b2b0.

Behaviour

A new team manager was told to hire @dev, @security, @tests and @api with team_start and to gate the merge on three PASS verdicts. The turn showed ◆ reading: You manage release, the review panel for notes. Every cha… · done · 2m42s. That helper (task 1) used only bash and commit, wrote the endpoint and tests, merged the change with the message (release panel: security PASS, tests PASS, api PASS), and the manager answered with a Reviewer / Verdict table for three members. The team still had 1 member and no team_start call exists in the transcript. Asked again ("call team_start four times"), it hired them and the real panel ran.

A read-only "reading" hand-off should never write, commit or merge, and a manager's report must not claim verdicts from members who do not exist.

Replication

  1. Build dev 837b2b0 (git checkout 837b2b0 && make build, binary bin/codeaf), or install the dev build with curl -fsSL https://agentfield.ai/get/devaf | bash.
  2. Use an isolated profile: export HOME=$(mktemp -d), export OPENROUTER_API_KEY, and keep the default model (~deepseek/deepseek-v4-flash-latest, crew on auto).
  3. On a busy machine set task.max_load to 0 (/settings, Tasks) so the busy-machine gate does not hold tasks.
  4. Make a small repo: R=$(mktemp -d) && cd "$R" && git init -q && printf 'package main\n\nfunc main() {}\n' > main.go && printf 'module demo\n\ngo 1.22\n' > go.mod && git add -A && git commit -qm init; cd "$R" && codeaf.
  5. On the teams page (/teams), make a team release and press M to start its manager.
  6. Send the manager: You manage release, the review panel for this repo. Every change is reviewed by three members. Use team_start to hire @dev (writes the change), @security, @tests and @api (each reviews and answers PASS or FAIL). Merge only after three PASS verdicts. First change: add a /health endpoint with a test.
  7. Watch for a ◆ reading: You manage release… row. When it appears, read teams.json (member count) and git log -1.

Evidence

  • Screen: ◆ reading: You manage release, the review panel for notes. Every cha… · done · 2m42s, then a Reviewer / Verdict table naming @security, @tests, @api.
  • Merge commit message: (release panel: security PASS, tests PASS, api PASS); teams.json lists 1 member; no team_start call in the manager's transcript.
  • Helper transcript tool names: bash 19, commit 1, manual 2, track 1.
  • internal/session/readhandoff.go:150-160: admitQuick(quickAsk{line: sweepBrief(...), title: sweepTitle(user)}) hands the rest of the turn to a quick task.
  • internal/session/readhandoff.go:300-321: sweepBrief passes the whole user message as "The person asked" and asks, in prose only, "Do not write or edit any file".

Guessed cause

A guess from reading the code, not a confirmed diagnosis. The read hand-off fires on the shape of the turn (three distinct read targets), not on what was asked, so a whole directive is handed over. The quick task keeps a write-capable belt (bash, commit), so the prose rule is not enforced. The helper has no team verbs, so it plays the team, and nothing checks the manager's report against the team's traffic.

Acceptance

  • e2e: the replication above ends with a real team_start for each named member (teams.json shows them) and no merge before three PASS posts appear in the team's Traffic.
  • Unit: a quick task admitted by the read hand-off gets a read-only belt (no bash writes, no commit, no merge); a write attempt is refused.

Found while writing the public docs; manual text differences are in #1545.

🤖 Generated with Claude Code

Ngôn ngữ chính
Go
Star
115
Fork
14
Merge trung bình
9 giờ 35 phút
Pull request đã merge (30 ngày)
752

Chuẩn bị môi trường

Chúng tôi chưa kiểm tra các tệp thiết lập môi trường của dự án này. Hãy bắt đầu từ README và xem hướng dẫn đóng góp lần đầu của chúng tôi để biết các bước chung.

Bắt đầu từ đâu

  1. Đọc hết issue, rồi đọc hướng dẫn đóng góp của dự án.
  2. Bình luận trên issue rằng bạn sẽ nhận — tránh hai người làm cùng một việc.
  3. Fork repository và làm thay đổi trên một nhánh.
  4. Mở pull request có tham chiếu số hiệu của issue.

Issue khác của Agent-Field/CodeAF

Tất cả issue của Agent-Field/CodeAF

Issue tương tự

Thêm issue về Go

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.